last executing test programs: 407.372563ms ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 0s ago: executing program 0 (id=6): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 68.843054][ T5217] cgroup: Unknown subsys name 'net' [ 68.971115][ T5217] cgroup: Unknown subsys name 'cpuset' [ 68.979876][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.602459][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.710465][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.717133][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.021829][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.038745][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.058009][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.065982][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.078217][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.088306][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.144468][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.154524][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.163353][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.188020][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.198667][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.206025][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.237519][ T4622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.246376][ T4622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.258820][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.268826][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.277613][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.288371][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.295762][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.312350][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.320594][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.338511][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.346343][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.354893][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.364689][ T4622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.379344][ T4622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.388137][ T4622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.397141][ T4622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.407071][ T4622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.415078][ T4622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.700958][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 74.772136][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 74.942063][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 74.952389][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.960385][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.967938][ T5227] bridge_slave_0: entered allmulticast mode [ 74.974892][ T5227] bridge_slave_0: entered promiscuous mode [ 75.001978][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.009429][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.016626][ T5227] bridge_slave_1: entered allmulticast mode [ 75.023646][ T5227] bridge_slave_1: entered promiscuous mode [ 75.042134][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 75.075992][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 75.105628][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.113586][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.122028][ T5231] bridge_slave_0: entered allmulticast mode [ 75.129403][ T5231] bridge_slave_0: entered promiscuous mode [ 75.144379][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.156188][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.175799][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.183190][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.191098][ T5231] bridge_slave_1: entered allmulticast mode [ 75.197952][ T5231] bridge_slave_1: entered promiscuous mode [ 75.286058][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.295659][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.303456][ T5240] bridge_slave_0: entered allmulticast mode [ 75.310873][ T5240] bridge_slave_0: entered promiscuous mode [ 75.318609][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.325736][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.333718][ T5240] bridge_slave_1: entered allmulticast mode [ 75.341273][ T5240] bridge_slave_1: entered promiscuous mode [ 75.361249][ T5227] team0: Port device team_slave_0 added [ 75.388836][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.399966][ T5227] team0: Port device team_slave_1 added [ 75.407348][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.482248][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.504391][ T5231] team0: Port device team_slave_0 added [ 75.510800][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.520536][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.529519][ T5234] bridge_slave_0: entered allmulticast mode [ 75.536248][ T5234] bridge_slave_0: entered promiscuous mode [ 75.544772][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.552958][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.560243][ T5234] bridge_slave_1: entered allmulticast mode [ 75.566948][ T5234] bridge_slave_1: entered promiscuous mode [ 75.584639][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.595015][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.602330][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.628687][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.648970][ T5231] team0: Port device team_slave_1 added [ 75.673010][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.680366][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.687609][ T5236] bridge_slave_0: entered allmulticast mode [ 75.694743][ T5236] bridge_slave_0: entered promiscuous mode [ 75.702823][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.710160][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.717341][ T5236] bridge_slave_1: entered allmulticast mode [ 75.724226][ T5236] bridge_slave_1: entered promiscuous mode [ 75.746939][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.756484][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.783318][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.808886][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.831871][ T5240] team0: Port device team_slave_0 added [ 75.853772][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.880280][ T5240] team0: Port device team_slave_1 added [ 75.889605][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.902028][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.911868][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.919534][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.945958][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.991893][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.999382][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.026458][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.057568][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.065143][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.091540][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.115160][ T5236] team0: Port device team_slave_0 added [ 76.124541][ T5234] team0: Port device team_slave_0 added [ 76.133106][ T5234] team0: Port device team_slave_1 added [ 76.154316][ T5227] hsr_slave_0: entered promiscuous mode [ 76.160802][ T5227] hsr_slave_1: entered promiscuous mode [ 76.172164][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.179257][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.205931][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.206055][ T4622] Bluetooth: hci0: command tx timeout [ 76.233127][ T5236] team0: Port device team_slave_1 added [ 76.268435][ T4622] Bluetooth: hci1: command tx timeout [ 76.292944][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.299983][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.326102][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.340499][ T5231] hsr_slave_0: entered promiscuous mode [ 76.346852][ T5231] hsr_slave_1: entered promiscuous mode [ 76.354109][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.357923][ T4622] Bluetooth: hci2: command tx timeout [ 76.362492][ T5231] Cannot create hsr debugfs directory [ 76.384071][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.391141][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.417401][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.438377][ T4622] Bluetooth: hci3: command tx timeout [ 76.445071][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.452360][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.478718][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.508000][ T4622] Bluetooth: hci4: command tx timeout [ 76.509420][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.521277][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.547586][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.596120][ T5240] hsr_slave_0: entered promiscuous mode [ 76.604586][ T5240] hsr_slave_1: entered promiscuous mode [ 76.611050][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.619009][ T5240] Cannot create hsr debugfs directory [ 76.660964][ T5234] hsr_slave_0: entered promiscuous mode [ 76.667235][ T5234] hsr_slave_1: entered promiscuous mode [ 76.675129][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.683307][ T5234] Cannot create hsr debugfs directory [ 76.753469][ T5236] hsr_slave_0: entered promiscuous mode [ 76.761474][ T5236] hsr_slave_1: entered promiscuous mode [ 76.767658][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.775439][ T5236] Cannot create hsr debugfs directory [ 77.058073][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.072483][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.092285][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.108419][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.145450][ T5231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.172440][ T5231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.185899][ T5231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.205499][ T5231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.241263][ T5234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.251286][ T5234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.263942][ T5234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.285873][ T5234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.410590][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.422276][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.433447][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.475952][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.485260][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.535218][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.556060][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.584575][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.593862][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.617157][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.636906][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.669661][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.676992][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.715871][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.735694][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.742899][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.776684][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.832953][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.840336][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.871310][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.883452][ T3038] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.890636][ T3038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.902417][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.929774][ T3038] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.937064][ T3038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.007200][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.026818][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.034028][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.064381][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.095438][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.150055][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.157278][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.174599][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.181901][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192983][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.200315][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.256179][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.263463][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.284461][ T4622] Bluetooth: hci0: command tx timeout [ 78.350543][ T4622] Bluetooth: hci1: command tx timeout [ 78.428570][ T4622] Bluetooth: hci2: command tx timeout [ 78.446337][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.509245][ T4622] Bluetooth: hci3: command tx timeout [ 78.522114][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.588068][ T4622] Bluetooth: hci4: command tx timeout [ 78.606812][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.632757][ T5227] veth0_vlan: entered promiscuous mode [ 78.674767][ T5227] veth1_vlan: entered promiscuous mode [ 78.744424][ T5234] veth0_vlan: entered promiscuous mode [ 78.783503][ T5234] veth1_vlan: entered promiscuous mode [ 78.832782][ T5231] veth0_vlan: entered promiscuous mode [ 78.856423][ T5227] veth0_macvtap: entered promiscuous mode [ 78.884857][ T5227] veth1_macvtap: entered promiscuous mode [ 78.907565][ T5231] veth1_vlan: entered promiscuous mode [ 78.932160][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.945366][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.983826][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.035516][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.045450][ T5234] veth0_macvtap: entered promiscuous mode [ 79.070116][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.081112][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.090148][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.100906][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.161478][ T5234] veth1_macvtap: entered promiscuous mode [ 79.199986][ T5231] veth0_macvtap: entered promiscuous mode [ 79.239633][ T5231] veth1_macvtap: entered promiscuous mode [ 79.331857][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.346518][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.361736][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.369884][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.380668][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.390894][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.401930][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.413884][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.436170][ T5240] veth0_vlan: entered promiscuous mode [ 79.449064][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.460159][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.472737][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.481932][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.482005][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.499092][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.514331][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.515392][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.532664][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.543973][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.564614][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575336][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.585348][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.594144][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.609091][ T5240] veth1_vlan: entered promiscuous mode [ 79.621775][ T5234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.631729][ T5234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.641019][ T5234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.649843][ T5234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.683502][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.697091][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.767536][ T5236] veth0_vlan: entered promiscuous mode [ 79.790139][ T5227] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.824799][ T5240] veth0_macvtap: entered promiscuous mode [ 79.835893][ T5240] veth1_macvtap: entered promiscuous mode [ 79.853433][ T5236] veth1_vlan: entered promiscuous mode [ 79.875008][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.895487][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.905846][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.917192][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.927110][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.938433][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.950815][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.976010][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.989615][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.999661][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.010211][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.020184][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.030873][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.043178][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.058597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.066479][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.136480][ T5236] veth0_macvtap: entered promiscuous mode [ 80.171280][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.179264][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.200394][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.209380][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.218233][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.226959][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.257221][ T5236] veth1_macvtap: entered promiscuous mode [ 80.348343][ T4622] Bluetooth: hci0: command tx timeout [ 80.378241][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.386454][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.403689][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.404006][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.422087][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.432986][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.448247][ T4622] Bluetooth: hci1: command tx timeout [ 80.460379][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.471501][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.497986][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.510227][ T4622] Bluetooth: hci2: command tx timeout [ 80.516345][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.527910][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.551808][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.574487][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.585473][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.597184][ T4622] Bluetooth: hci3: command tx timeout [ 80.614912][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.624931][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.635642][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.645643][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.656349][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.668424][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.680463][ T4622] Bluetooth: hci4: command tx timeout [ 80.686007][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.705863][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.764846][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787561][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.798734][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.810346][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.929504][ T4622] Bluetooth: hci0: command tx timeout [ 83.935007][ T4622] Bluetooth: hci1: command tx timeout [ 83.947182][ T4622] Bluetooth: hci2: command tx timeout [ 83.960181][ T4622] Bluetooth: hci3: command tx timeout [ 83.965657][ T4622] Bluetooth: hci4: command tx timeout [ 92.427571][ T8] cfg80211: failed to load regulatory.db [ 92.447204][ C1] sched: DL replenish lagged too much [ 153.219154][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.231553][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.751370][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.769451][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.895783][ T54] Bluetooth: hci4: command tx timeout [ 229.309810][ T54] Bluetooth: hci2: command tx timeout [ 229.315309][ T54] Bluetooth: hci0: command tx timeout [ 229.340622][ T54] Bluetooth: hci3: command tx timeout [ 229.346116][ T54] Bluetooth: hci1: command tx timeout [ 234.267902][ T30] INFO: task syz-executor:5231 blocked for more than 145 seconds. [ 234.276000][ T30] Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 234.317728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.326493][ T30] task:syz-executor state:D stack:19968 pid:5231 tgid:5231 ppid:1 flags:0x00000004 [ 234.397740][ T30] Call Trace: [ 234.401826][ T30] [ 234.404810][ T30] __schedule+0x1895/0x4b30 [ 234.462399][ T30] ? __pfx___schedule+0x10/0x10 [ 234.467361][ T30] ? __pfx_lock_release+0x10/0x10 [ 234.517979][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 234.523573][ T30] ? schedule+0x90/0x320 [ 234.563311][ T30] schedule+0x14b/0x320 [ 234.567574][ T30] schedule_preempt_disabled+0x13/0x30 [ 234.597735][ T30] __mutex_lock+0x6a7/0xd70 [ 234.602339][ T30] ? __mutex_lock+0x52a/0xd70 [ 234.649069][ T30] ? cgrp_css_online+0x90/0x2f0 [ 234.654027][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 234.687808][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 234.693285][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 234.747823][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 234.753308][ T30] cgrp_css_online+0x90/0x2f0 [ 234.787794][ T30] online_css+0xbb/0x2e0 [ 234.792135][ T30] cgroup_apply_control_enable+0x7d7/0xaf0 [ 234.827788][ T30] cgroup_mkdir+0xa52/0xd30 [ 234.832397][ T30] ? __pfx_cgroup_mkdir+0x10/0x10 [ 234.837460][ T30] kernfs_iop_mkdir+0x253/0x3f0 [ 234.887777][ T30] vfs_mkdir+0x2f9/0x4f0 [ 234.892118][ T30] do_mkdirat+0x264/0x3a0 [ 234.896502][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 234.967801][ T30] ? getname_flags+0x1e3/0x540 [ 234.972669][ T30] __x64_sys_mkdirat+0x87/0xa0 [ 234.977542][ T30] do_syscall_64+0xf3/0x230 [ 235.028086][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.032856][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.087778][ T30] RIP: 0033:0x7f05d237c897 [ 235.092288][ T30] RSP: 002b:00007ffc85a03958 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 235.127773][ T30] RAX: ffffffffffffffda RBX: 00007f05d23f050d RCX: 00007f05d237c897 [ 235.135882][ T30] RDX: 00000000000001ff RSI: 00007ffc85a039a0 RDI: 00000000ffffff9c [ 235.197732][ T30] RBP: 0000000000000001 R08: 0000000000000013 R09: 00007ffc85a036a7 [ 235.205797][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f05d23f18b9 [ 235.267808][ T30] R13: 0000000000000003 R14: 00007ffc85a039a0 R15: 00007ffc85a039e0 [ 235.275893][ T30] [ 235.317758][ T30] INFO: task syz-executor:5234 blocked for more than 146 seconds. [ 235.326413][ T30] Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 235.377768][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.386520][ T30] task:syz-executor state:D stack:19920 pid:5234 tgid:5234 ppid:5224 flags:0x00000000 [ 235.457715][ T30] Call Trace: [ 235.461073][ T30] [ 235.464041][ T30] __schedule+0x1895/0x4b30 [ 235.517736][ T30] ? __pfx___schedule+0x10/0x10 [ 235.522713][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.567781][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.573359][ T30] ? schedule+0x90/0x320 [ 235.617729][ T30] schedule+0x14b/0x320 [ 235.621990][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.627507][ T30] __mutex_lock+0x6a7/0xd70 [ 235.667860][ T30] ? __mutex_lock+0x52a/0xd70 [ 235.672631][ T30] ? cgroup_kn_lock_live+0xe6/0x290 [ 235.717715][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.722842][ T30] ? kernfs_iop_permission+0x390/0x4d0 [ 235.777745][ T30] cgroup_kn_lock_live+0xe6/0x290 [ 235.782879][ T30] cgroup_mkdir+0x5d/0xd30 [ 235.787350][ T30] ? __pfx_cgroup_mkdir+0x10/0x10 [ 235.867797][ T30] kernfs_iop_mkdir+0x253/0x3f0 [ 235.872761][ T30] vfs_mkdir+0x2f9/0x4f0 [ 235.877054][ T30] do_mkdirat+0x264/0x3a0 [ 235.923346][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 235.938175][ T30] ? getname_flags+0x1e3/0x540 [ 235.943110][ T30] __x64_sys_mkdirat+0x87/0xa0 [ 235.967794][ T30] do_syscall_64+0xf3/0x230 [ 235.972394][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.977123][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.057707][ T30] RIP: 0033:0x7f3471b7c897 [ 236.062226][ T30] RSP: 002b:00007ffeeb7c9a68 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 236.123456][ T30] RAX: ffffffffffffffda RBX: 00007ffeeb7c9ab0 RCX: 00007f3471b7c897 [ 236.167738][ T30] RDX: 00000000000001ff RSI: 00007ffeeb7c9ab0 RDI: 00000000ffffff9c [ 236.175808][ T30] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffeeb7c97b7 [ 236.244382][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 236.287890][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 236.295973][ T30] [ 236.337756][ T30] INFO: task syz.0.6:5314 blocked for more than 147 seconds. [ 236.345225][ T30] Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 236.407900][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.416654][ T30] task:syz.0.6 state:D stack:27136 pid:5314 tgid:5312 ppid:5227 flags:0x00000004 [ 236.483354][ T30] Call Trace: [ 236.486725][ T30] [ 236.510623][ T30] __schedule+0x1895/0x4b30 [ 236.515269][ T30] ? __pfx___schedule+0x10/0x10 [ 236.537803][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.542940][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.577851][ T30] ? schedule+0x90/0x320 [ 236.582194][ T30] schedule+0x14b/0x320 [ 236.586419][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.647757][ T30] __mutex_lock+0x6a7/0xd70 [ 236.652361][ T30] ? __mutex_lock+0x52a/0xd70 [ 236.688372][ T30] ? genl_rcv_msg+0x121/0xec0 [ 236.693164][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.731108][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.736418][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 236.783595][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 236.797729][ T30] ? radix_tree_lookup+0x238/0x290 [ 236.802942][ T30] genl_rcv_msg+0x121/0xec0 [ 236.807500][ T30] ? mark_lock+0x9a/0x360 [ 236.857783][ T30] ? __lock_acquire+0x1384/0x2050 [ 236.863333][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.907741][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 236.912872][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.937800][ T30] netlink_rcv_skb+0x1e3/0x430 [ 236.942669][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.977766][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.983179][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 237.037767][ T30] genl_rcv+0x28/0x40 [ 237.041933][ T30] netlink_unicast+0x7f6/0x990 [ 237.046766][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.092863][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.117788][ T30] ? __check_object_size+0x48e/0x900 [ 237.123191][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.153427][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.184036][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.197921][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.203385][ T30] __sock_sendmsg+0x221/0x270 [ 237.232572][ T30] __sys_sendto+0x39b/0x4f0 [ 237.237181][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 237.273711][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.302326][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.327832][ T30] __x64_sys_sendto+0xde/0x100 [ 237.332695][ T30] do_syscall_64+0xf3/0x230 [ 237.337246][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.384043][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.408018][ T30] RIP: 0033:0x7fd87377fe8c [ 237.412519][ T30] RSP: 002b:00007fd874630ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 237.463395][ T30] RAX: ffffffffffffffda RBX: 00007fd874630fc0 RCX: 00007fd87377fe8c [ 237.497855][ T30] RDX: 0000000000000024 RSI: 00007fd874631010 RDI: 0000000000000009 [ 237.506100][ T30] RBP: 0000000000000000 R08: 00007fd874630f14 R09: 000000000000000c [ 237.560760][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 237.607877][ T30] R13: 00007fd874630f68 R14: 00007fd874631010 R15: 0000000000000000 [ 237.615981][ T30] [ 237.678760][ T30] [ 237.678760][ T30] Showing all locks held in the system: [ 237.686568][ T30] 2 locks held by kworker/u8:0/11: [ 237.737744][ T30] 1 lock held by khungtaskd/30: [ 237.742691][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 237.764182][ T30] 3 locks held by kworker/u8:7/4027: [ 237.777736][ T30] #0: ffff88814b359948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 237.797952][ T30] #1: ffffc9000c42fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 237.816227][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 237.837760][ T30] 2 locks held by dhcpcd/4899: [ 237.842701][ T30] 2 locks held by getty/4989: [ 237.847415][ T30] #0: ffff88814c9400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 237.863961][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 237.898338][ T30] 4 locks held by syz-executor/5234: [ 237.903701][ T30] #0: ffff888029786420 (sb_writers#11){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 237.946578][ T30] #1: ffff88807a96d060 (&type->i_mutex_dir_key#7/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 237.985517][ T30] #2: ffffffff8e96c4e8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xe6/0x290 [ 238.027904][ T30] #3: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: cgrp_css_online+0x90/0x2f0 [ 238.037188][ T30] 3 locks held by syz-executor/5236: [ 238.081801][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.132586][ T30] #1: ffff888063ec1428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 238.167904][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 238.185813][ T30] 2 locks held by syz-executor/5240: [ 238.193419][ T30] #0: ffffffff8fd37e30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 238.224141][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 238.252676][ T30] 1 lock held by syz.0.6/5314: [ 238.257514][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 238.269338][ T30] 1 lock held by dhcpcd/5332: [ 238.274067][ T30] #0: ffff8880800dc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.284331][ T30] 1 lock held by dhcpcd/5333: [ 238.289399][ T30] #0: ffff8880811c8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.300383][ T30] 1 lock held by dhcpcd/5334: [ 238.305106][ T30] #0: ffff8880603e0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.315509][ T30] 1 lock held by dhcpcd/5335: [ 238.320612][ T30] #0: ffff888048b98258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.330773][ T30] 1 lock held by dhcpcd/5336: [ 238.335499][ T30] #0: ffff888048b9a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.345691][ T30] 1 lock held by dhcpcd/5337: [ 238.358847][ T30] #0: ffff8880233fc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 238.369559][ T30] [ 238.417726][ T30] ============================================= [ 238.417726][ T30] [ 238.426224][ T30] NMI backtrace for cpu 0 [ 238.430596][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 238.441158][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.451350][ T30] Call Trace: [ 238.454675][ T30] [ 238.457647][ T30] dump_stack_lvl+0x241/0x360 [ 238.462372][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.467610][ T30] ? __pfx__printk+0x10/0x10 [ 238.472350][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 238.477348][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.482847][ T30] ? _printk+0xd5/0x120 [ 238.487032][ T30] ? __pfx__printk+0x10/0x10 [ 238.491736][ T30] ? __wake_up_klogd+0xcc/0x110 [ 238.496607][ T30] ? __pfx__printk+0x10/0x10 [ 238.501223][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 238.506271][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 238.512274][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 238.518276][ T30] watchdog+0xff4/0x1040 [ 238.522541][ T30] ? watchdog+0x1ea/0x1040 [ 238.526988][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.531699][ T30] kthread+0x2f0/0x390 [ 238.535787][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.540516][ T30] ? __pfx_kthread+0x10/0x10 [ 238.545290][ T30] ret_from_fork+0x4b/0x80 [ 238.549762][ T30] ? __pfx_kthread+0x10/0x10 [ 238.554455][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.559245][ T30] [ 238.562925][ T30] Sending NMI from CPU 0 to CPUs 1: [ 238.568647][ C1] NMI backtrace for cpu 1 [ 238.568661][ C1] CPU: 1 UID: 101 PID: 5007 Comm: dhcpcd Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 238.568682][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.568693][ C1] RIP: 0010:trace_hardirqs_on+0x23/0x40 [ 238.568722][ C1] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 8d ad 66 7e 85 c0 74 14 48 8b 3c 24 e8 b8 fe ff ff 65 c7 05 75 ad 66 7e 00 00 00 00 a8 6d d3 ff 48 8b 3c 24 e9 8f eb 28 0a 66 2e 0f 1f 84 00 00 00 [ 238.568742][ C1] RSP: 0018:ffffc90002ec6db8 EFLAGS: 00000002 [ 238.568759][ C1] RAX: 0000000000000001 RBX: ffffffff9a5ca678 RCX: ffffffff819cab1c [ 238.568773][ C1] RDX: 0000000000000000 RSI: ffffffff8c60fb00 RDI: ffffffff8c60fac0 [ 238.568786][ C1] RBP: ffffc90002ec6e50 R08: ffffffff901cf2ef R09: 1ffffffff2039e5d [ 238.568800][ C1] R10: dffffc0000000000 R11: fffffbfff2039e5e R12: dffffc0000000000 [ 238.568813][ C1] R13: 1ffff920005d8db8 R14: ffffc90002ec6de0 R15: 0000000000000246 [ 238.568827][ C1] FS: 00007f3c611d1740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 238.568843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.568856][ C1] CR2: 00007f3c612a9bd0 CR3: 000000007dddc000 CR4: 00000000003526f0 [ 238.568872][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.568883][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.568894][ C1] Call Trace: [ 238.568900][ C1] [ 238.568908][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 238.568931][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 238.568961][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.568982][ C1] ? nmi_handle+0x2a/0x5a0 [ 238.569009][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 238.569041][ C1] ? nmi_handle+0x14f/0x5a0 [ 238.569059][ C1] ? nmi_handle+0x2a/0x5a0 [ 238.569078][ C1] ? trace_hardirqs_on+0x23/0x40 [ 238.569100][ C1] ? default_do_nmi+0x63/0x160 [ 238.569123][ C1] ? exc_nmi+0x123/0x1f0 [ 238.569144][ C1] ? end_repeat_nmi+0xf/0x53 [ 238.569166][ C1] ? trace_irq_enable+0x2c/0x120 [ 238.569189][ C1] ? trace_hardirqs_on+0x23/0x40 [ 238.569211][ C1] ? trace_hardirqs_on+0x23/0x40 [ 238.569234][ C1] ? trace_hardirqs_on+0x23/0x40 [ 238.569257][ C1] [ 238.569263][ C1] [ 238.569269][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 238.569298][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 238.569329][ C1] debug_check_no_obj_freed+0x561/0x580 [ 238.569363][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 238.569391][ C1] ? page_ext_get+0x20/0x2a0 [ 238.569412][ C1] ? page_ext_get+0x1d6/0x2a0 [ 238.569435][ C1] free_unref_page+0x41b/0xf20 [ 238.569467][ C1] __put_partials+0xeb/0x130 [ 238.569496][ C1] put_cpu_partial+0x17c/0x250 [ 238.569513][ C1] ? put_cpu_partial+0x70/0x250 [ 238.569533][ C1] __slab_free+0x2ea/0x3d0 [ 238.569552][ C1] ? __phys_addr+0xba/0x170 [ 238.569572][ C1] qlist_free_all+0x9a/0x140 [ 238.569591][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 238.569611][ C1] __kasan_slab_alloc+0x23/0x80 [ 238.569632][ C1] __kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 238.569657][ C1] ? __alloc_skb+0x1f3/0x440 [ 238.569676][ C1] ? __alloc_skb+0x1f3/0x440 [ 238.569692][ C1] kmalloc_reserve+0x111/0x2a0 [ 238.569711][ C1] __alloc_skb+0x1f3/0x440 [ 238.569730][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 238.569749][ C1] ? __lock_acquire+0x1384/0x2050 [ 238.569778][ C1] alloc_skb_with_frags+0xc3/0x820 [ 238.569803][ C1] sock_alloc_send_pskb+0x91a/0xa60 [ 238.569834][ C1] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 238.569860][ C1] ? packet_cached_dev_get+0x1c/0x2b0 [ 238.569890][ C1] packet_sendmsg+0x3f33/0x6860 [ 238.569926][ C1] ? __lock_acquire+0x1384/0x2050 [ 238.569954][ C1] ? __pfx___might_resched+0x10/0x10 [ 238.569987][ C1] ? aa_sk_perm+0x96d/0xab0 [ 238.570005][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 238.570038][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 238.570064][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 238.570086][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 238.570108][ C1] __sock_sendmsg+0x221/0x270 [ 238.570134][ C1] sock_write_iter+0x2d7/0x3f0 [ 238.570157][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 238.570184][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 238.570207][ C1] ? aa_file_perm+0x3ef/0xf50 [ 238.570232][ C1] do_iter_readv_writev+0x600/0x880 [ 238.570253][ C1] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 238.570275][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 238.570292][ C1] ? security_file_permission+0x74/0x280 [ 238.570320][ C1] ? rw_verify_area+0x1c3/0x6f0 [ 238.570348][ C1] vfs_writev+0x376/0xba0 [ 238.570373][ C1] ? __seccomp_filter+0x4fe/0x1fe0 [ 238.570391][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 238.570410][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 238.570438][ C1] ? __pfx_vfs_read+0x10/0x10 [ 238.570470][ C1] ? fdget_pos+0x19a/0x320 [ 238.570492][ C1] do_writev+0x1b1/0x350 [ 238.570517][ C1] ? __pfx_do_writev+0x10/0x10 [ 238.570539][ C1] ? __secure_computing+0x125/0x370 [ 238.570560][ C1] do_syscall_64+0xf3/0x230 [ 238.570578][ C1] ? clear_bhb_loop+0x35/0x90 [ 238.570597][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.570624][ C1] RIP: 0033:0x7f3c6129fe03 [ 238.570640][ C1] Code: 89 c7 48 89 44 24 08 e8 6a f2 f9 ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 14 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6d 48 8b 15 f6 5f 0d 00 f7 d8 64 89 02 48 83 [ 238.570654][ C1] RSP: 002b:00007ffc0e9a83c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 238.570672][ C1] RAX: ffffffffffffffda RBX: 00007ffc0e9b8678 RCX: 00007f3c6129fe03 [ 238.570685][ C1] RDX: 0000000000000002 RSI: 00007ffc0e9a83e0 RDI: 0000000000000005 [ 238.570697][ C1] RBP: 0000556a293529c7 R08: 0000000015c9b442 R09: 0000000000000000 [ 238.570708][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.570719][ C1] R13: 0000556a498392f0 R14: 00007ffc0e9a8478 R15: 00007ffc0e9a8428 [ 238.570740][ C1] [ 239.269139][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 239.276062][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00233-gc186b7a7f238 #0 [ 239.286696][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.296799][ T30] Call Trace: [ 239.300119][ T30] [ 239.303084][ T30] dump_stack_lvl+0x241/0x360 [ 239.307814][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.313063][ T30] ? __pfx__printk+0x10/0x10 [ 239.317707][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.323757][ T30] ? vscnprintf+0x5d/0x90 [ 239.328150][ T30] panic+0x349/0x880 [ 239.332103][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 239.338305][ T30] ? __pfx_panic+0x10/0x10 [ 239.342775][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 239.348191][ T30] ? __irq_work_queue_local+0x137/0x410 [ 239.353792][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 239.359214][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 239.365452][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 239.371655][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 239.377866][ T30] watchdog+0x1033/0x1040 [ 239.382252][ T30] ? watchdog+0x1ea/0x1040 [ 239.386722][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.391445][ T30] kthread+0x2f0/0x390 [ 239.395551][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.400274][ T30] ? __pfx_kthread+0x10/0x10 [ 239.404906][ T30] ret_from_fork+0x4b/0x80 [ 239.409468][ T30] ? __pfx_kthread+0x10/0x10 [ 239.414094][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.418913][ T30] [ 239.422327][ T30] Kernel Offset: disabled [ 239.426691][ T30] Rebooting in 86400 seconds..